This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft File: LToKI8WbTfbb4BpMXzt8i___cA0.mft (raw, json) Hash identifier: iOZFATSfNEwNttbiFLjdASX1d8lPZs8Xlv9HOfBQNow= Subject key identifier: 17:9A:53:07:D9:FB:F8:E9:89:AA:E3:4B:B9:7D:C3:D5:87:79:4A:6D Authority key identifier: 2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D Certificate issuer: /CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft Manifest number: 0280 Signing time: Tue 23 Dec 2025 00:35:00 +0000 Manifest this update: Tue 23 Dec 2025 00:35:00 +0000 Manifest next update: Tue 30 Dec 2025 00:35:00 +0000 Files and hashes: 1: LToKI8WbTfbb4BpMXzt8i___cA0.crl (hash: YvI6g5c7xLQPk7ESqkPksQH+1CbvGEpw6W/JzTB5sUk=) 2: C202E82834B611ED815AAB32C4F9AE02.roa (hash: g8vcclbbREYqZXoYauTIQjOb/RVyOM/9dHk3sz7i1Lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D0BC, serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D Validity Not Before: Dec 23 00:35:00 2025 GMT Not After : Dec 30 00:35:00 2025 GMT Subject: CN=6949e3b4-cc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:b1:94:e3:45:b5:5e:4b:49:f0:a9:cd:ef: 4c:4e:30:80:59:49:45:5c:e7:cc:2d:6d:0f:68:8b: 68:d6:ee:e6:ef:db:81:15:7d:28:f7:58:ad:5b:7c: 64:86:e1:7d:c3:a9:72:13:61:0a:62:7b:09:7f:ca: ea:93:99:7c:25:45:36:de:98:f1:cf:ee:a6:dc:8b: 79:0b:1a:c0:ec:c1:be:c0:58:7c:74:e1:6d:af:0f: 14:2f:39:96:64:a5:ad:51:fc:56:f1:f9:67:f0:56: 50:ad:9b:02:a9:04:64:85:4c:c8:86:ee:a8:05:48: c9:04:c5:df:01:17:bd:e6:ec:0d:1b:86:0d:6f:43: 02:74:aa:12:91:f4:66:2e:40:51:23:44:a9:42:f2: 7c:41:2d:54:0e:de:49:52:d0:b0:da:69:85:d5:0d: 78:f6:e4:99:5b:18:1e:31:cc:6a:a9:3d:3f:06:d5: f4:5c:12:75:a6:01:53:67:3b:0b:18:c2:20:17:13: 5a:f2:2d:51:1f:d9:e3:f4:5d:25:d6:92:05:5f:0c: c7:d5:51:cf:cc:04:a4:b3:33:e9:fa:db:e4:56:f5: 86:71:59:b6:f9:4d:fc:d3:1d:e3:0c:9c:3c:95:9d: 39:4e:37:45:2e:8c:d6:47:09:d1:cf:c3:19:f8:62: 5e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9A:53:07:D9:FB:F8:E9:89:AA:E3:4B:B9:7D:C3:D5:87:79:4A:6D X509v3 Authority Key Identifier: keyid:2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:81:65:77:69:37:17:f0:fe:8a:c0:5f:09:9d:9f:bf:9b:ee: 0c:44:be:99:8b:d6:ac:86:a0:68:22:44:47:04:6a:fc:e2:93: 05:cf:c5:19:f1:bf:2c:ea:5a:0c:32:06:ce:14:0d:33:33:f0: ec:0b:67:cf:8b:32:ce:18:94:cb:6d:48:b5:3d:1b:ad:dc:d9: 49:a5:54:fb:95:fa:30:9e:ff:70:1a:8c:df:60:f4:bc:7c:8f: 43:8c:12:8e:28:aa:1d:30:0d:e4:b1:cc:59:c4:2e:67:b4:22: 51:3b:dc:dd:ba:52:cf:a5:38:0f:e2:d1:db:fc:eb:8d:55:d4: b8:af:c2:35:9d:08:51:34:0f:2c:3f:c5:70:08:1f:68:ee:ae: 35:ee:03:b6:a6:bc:9c:ba:8b:d4:0d:2c:04:ed:52:57:bc:bf: 84:cb:89:9b:59:52:77:cb:78:aa:e6:7a:a9:61:f2:4d:38:92: 7b:28:a3:18:09:41:75:90:7a:b8:00:1c:65:1c:76:c9:c5:32: cc:38:10:a1:4b:c2:bf:01:4e:37:3a:f0:ce:96:33:ba:be:35: 10:3c:29:09:e1:c5:58:90:d0:80:22:fd:63:1d:46:04:72:77: d6:08:34:0f:79:f8:af:96:fd:5f:b7:b8:76:b9:77:05:2d:8b: 4a:ea:a4:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwQkMxMTAvBgNVBAUTKDJEM0EwQTIzQzU5QjRERjZEQkUwMUE0QzVGM0I3QzhC RkZGRjcwMEQwHhcNMjUxMjIzMDAzNTAwWhcNMjUxMjMwMDAzNTAwWjAYMRYwFAYD VQQDDA02OTQ5ZTNiNC1jYzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupmxlONFtV5LSfCpze9MTjCAWUlFXOfMLW0PaIto1u7m79uBFX0o91itW3xk huF9w6lyE2EKYnsJf8rqk5l8JUU23pjxz+6m3It5CxrA7MG+wFh8dOFtrw8ULzmW ZKWtUfxW8fln8FZQrZsCqQRkhUzIhu6oBUjJBMXfARe95uwNG4YNb0MCdKoSkfRm LkBRI0SpQvJ8QS1UDt5JUtCw2mmF1Q149uSZWxgeMcxqqT0/BtX0XBJ1pgFTZzsL GMIgFxNa8i1RH9nj9F0l1pIFXwzH1VHPzASkszPp+tvkVvWGcVm2+U380x3jDJw8 lZ05TjdFLozWRwnRz8MZ+GJeqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeaUwfZ +/jpiarjS7l9w9WHeUptMB8GA1UdIwQYMBaAFC06CiPFm0322+AaTF87fIv//3AN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDBCQy8yMDI0QjQ0ODM0 QjQxMUVEOUQ3MEVGMzBDNEY5QUUwMi9MVG9LSThXYlRmYmI0QnBNWHp0OGlfX19j QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUb0tJOFdiVGZiYjRCcE1YenQ4aV9fX2NBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDBCQy8yMDI0QjQ0ODM0QjQxMUVEOUQ3MEVGMzBDNEY5QUUwMi9MVG9LSThXYlRm YmI0QnBNWHp0OGlfX19jQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIgWV3aTcX8P6KwF8JnZ+/m+4MRL6Zi9ashqBoIkRHBGr84pMFz8UZ 8b8s6loMMgbOFA0zM/DsC2fPizLOGJTLbUi1PRut3NlJpVT7lfownv9wGozfYPS8 fI9DjBKOKKodMA3kscxZxC5ntCJRO9zdulLPpTgP4tHb/OuNVdS4r8I1nQhRNA8s P8VwCB9o7q417gO2prycuovUDSwE7VJXvL+Ey4mbWVJ3y3iq5nqpYfJNOJJ7KKMY CUF1kHq4ABxlHHbJxTLMOBChS8K/AU43OvDOljO6vjUQPCkJ4cVYkNCAIv1jHUYE cnfWCDQPefivlv1ft7h2uXcFLYtK6qR+ -----END CERTIFICATE-----Generated at Wed Dec 24 17:35:00 2025 by rpki-client